Extracted

• • Target
    jEgLNI40Ro9O775.exe
  • Size 1.3MB
  • SHA256 b475b8978e80b7cfc97d95df7e5c7b51efd86ec23d5257ec0c5aa40df7abf30a
  • MD5 1562becba4f926150ced8f08a42c9111
  • SHA1 dc0a94947dd9ffa8f928ce0e3098965f365410d9
  • SHA512 9fe0f642e740eb7f9064323b23ed4e2b0bd626594bfcda9c3065ebdd76f51ba04c28f230d6ec5998a1bff6f4ac2f8a9c195539fe100ce2fb7854d149fe8530ef
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2